Fallout

The latest malware caught across open-source registries and marketplaces — evidence included.

Crit

Ecosystem

Domain

Confirmed

db-query-log 1.0.2 A database connector class that simplifies connections and queries to a database for nodejs apps Jul 2 javascript

395113e4341f54cdad52749b4a61cb6fe4dd8e69b62ef71bab7d1bb98269088c O₂(CS₂)H₃(Cm₃DbPo)Md(Pa₂)

100% Fetches and executes remote payload

db-query-log 1.0.1 Jun 23 javascript

d952cf09882000176856094dcc748fa975563bbbab6d953b9ec53e493a25b845 O₂(CS₂)H₃(Cm₃DbPo)Md(Pa₂)

99% Compiles hidden remote payload

2026 06-19-db-dx-connector-v1.0.3 Jun 22 javascript

afedfd14c4df9d1a0179f1b75b807bc6c18658c5a6fd2b9a55783a468e9e1a04 O₂(CS₂)H₃(Cm₃DbPo)Md(Pa₂)

100% Fetches and executes remote payload